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and 



(Original) A plarfonn comprisiiig: 

a processor executing in one of a normal execution mode and an isolated execution mode; 
a system tnemoiy including an isolated area, an isolated output area, and a non-isolated area; 

an output device. 

2. (Original) The platform of claim 1 wherein the output device is a graphics card. 

3. (Original) The platform of claim 2 further comprising: 

a memoiy control hub (MCH) coupled between the system memory, and the processor and 
the graphics card, the memory control hub to permit the graphics card to access the isolated output 
area only when the graphics card is in isolated access mode. 

4. (Original) The platform of claim 3 wherein the gmphics card comprises: 

a direct memory access (DMA) controller and wherein local storage of the data from the 
isolated output area is not permitted. 

5. (Original) The platform of claim 3 wheiein only the graphics card is permitted, to read the 
isolated output area. 

6. (Original) The platform of claim 1 farther comprising: 

an operating system (O/S) nub having a driver to write display data into the isolated output 
area when the processor is executing in isolated execution mode. 

7. (Original) The platform of claim 3 further comprising: 

a link between the graphics card and the MCH having an isolated transaction type. 
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8. (Original) The platform of claim 3 wherdTimcMCH only pemri^ 
the isolated output aiea. 

9. (Original) Theplatfoimof claim? wherein the liiik is a secure accelerated graphics port 
bus. 

10. (Original) The platfonn of clairo 2 wheiein the graphics card comprises: 
an isolated bit plane; and 

a non-isolated bit plane. 

1 1 . (Original) The platfonn of claim 10 wherein the graphics card denies all external access to 
the isolated bit plane. 

12. (Original) A method comprising: 

establishing an isolated execution environment having an isolated execution mode; and 
preventing access to output data by any requester not operating in an isolated mode. 

13. (Original) The method of claim 12 wherein establishing comprises: 
segregating a system memory into an isoUted output area and a non-isolated area. 

14. (Original) The method of claim 13 further comprising: 

issuing an isolated direct memory access (DMA) request for display data in the isolated 
onxpMi area from a graphics card; and 

refreshing the display based on the display data. 

15. (Original) The method of claim 13 wherein preventing comprises; 

identifying if an isolated attribute is present in a request for access to the isolated output 
area; and 

denying the request if no isolated attribute is present. 

16. (Original) The method of claim 13 further comprising: 
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loading data from the isolated output area into a bit plane on a graphics card; and 
denying all external access to the bit plane. 

17. (Original) The method of claim 16 further comprising: 

defining a first window for display of an image corresponding to the bit plane; and 
occluding all windows but the fiisi window. 

18. (Original) The method of claim 13 further comprising: 
retrieving data from the isolated output area; 
displaying an image corresponding to the data; and 

occluding the image prior to a platform transitioning out of isolated execution mode. 



direct memory access (DMA) conttoller to issue requests for access to an isolated output 
first interface coupled to the DMA controller to forward requests to a memory control hub 



19. (Original) A platfonn comprising: 

apiocessorexecutingin one of anormal execution mode and an isolated execution mode; 

a 

area; 

a 

(MCH); and 

asecond interface coupled to theDMA controller to supply output data to an output device. 

20. (Original) The apparatus of claim 19 wherein the first interface is a secure accelerated 
graphics port (AGP) and the oatpui device is a display. 

21. (Original) The apparams of claim 19 wherein the DMA controller attaches an isolated 
attribute to any isolated output area access request 

22. (Original) The apparatus of claim 19 wherein the second interface is an audio interface 
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